Privacy Policy
Last updated 6 September 2026
1. Who we are
Iguanify Ltd, registered in England & Wales (company No. 17304816), 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, is the data controller for the Iguanify service. For any privacy question or request, email support@iguanify.com.
2. What we collect
- Account data: your name, email address and a salted hash of your password. We never store the password itself.
- Production data: the prompts and parameters you submit, the jobs they create, and the outputs we deliver to you.
- Studio enquiry data: the business contact details, commissioning brief or buyer-material request you choose to send through our Studio forms.
- Usage data: credit balance and transaction history, and standard server logs (IP address, timestamps) kept for security and rate limiting.
3. What we use it for
- Running the service: generating your jobs, delivering outputs, maintaining your balance.
- Security: session management, fraud and abuse prevention, rate limiting.
- Service emails: delivery notifications and material changes to terms or pricing. No marketing without separate consent.
- Studio enquiries: reviewing a proposed commission, arranging a conversation and sharing relevant buyer materials.
- Conversion measurement: we record key service events (account created, show created, payment completed) server-side, first-party and without cookies, to measure that the product works.
4. What we don't do
- We don't sell your data.
- We don't use your prompts or outputs to advertise to anyone else.
- We don't load advertising or analytics trackers until you consent. Google Ads, the Meta (Facebook) Pixel, and our PostHog product analytics (including masked session replay) run only after you press Accept in the cookie banner; decline and they stay off.
5. Where your data lives
Account and job data are stored on our production infrastructure in the UK/EU. Generated media may be processed by the model providers in our pipeline strictly to produce your outputs.
Studio enquiry emails are sent to our business inbox through our transactional email provider and are retained only as long as needed to handle the opportunity, keep an appropriate business record and meet legal obligations.
If you choose to contact us on WhatsApp, your phone number, profile name and messages are processed by WhatsApp (Meta) under their own privacy policy; we only use them to reply to you.
6. Your rights
Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can close your account at any time, and we'll action it within 30 days — email support@iguanify.com. You can also complain to the ICO (ico.org.uk).
7. Cookies
One essential cookie: sid, the session that keeps you signed in. HttpOnly, same-site, deleted when you sign out — always on, no consent needed.
Advertising and analytics cookies (Google Ads via gtag.js, the Meta/Facebook Pixel, and PostHog product analytics) are optional and off by default. We use Google Consent Mode v2, and the Meta Pixel and PostHog are held to the same choice, so they are set only after you press Accept in the cookie banner; they measure the performance of our ads and how the site is used. PostHog (hosted in the EU) may also record a masked replay of your session — text you type, such as emails and prompts, is masked and never captured. Decline, or simply don't accept, and none are set. You can change your mind by clearing the site's cookies and storage.
IGUANIFY